-
GO-30-CSP W2+W3: migrate all inline on* handlers to delegated dispatch
-
Frontend cold spots R4: escapeHandlerArg sweep + gate rule, email preview to Rust
-
Frontend cold spots R2: contact activity feed to Rust
-
Frontend XSS: seal the unsafe attribute escaper (CHRONIC-XSS)
-
CSS dedup + UI mode separation + ยง3 launch-readiness fixes
-
UX audit sweep: Tier 1-4 + Tier 6 + design-system charter
-
Daily notes, implicit contacts, UX polish, calendar views, search